From: Jason Rumney <jasonr@gnu.org>
To: Sascha Wilde <wilde@sha-bang.de>
Cc: emacs-devel@gnu.org
Subject: Re: Default value of tls-checktrust should be 'ask
Date: Tue, 08 Apr 2008 10:19:51 +0100 [thread overview]
Message-ID: <47FB38B7.70806@gnu.org> (raw)
In-Reply-To: <m2y77ok979.fsf@kenny.sha-bang.de>
Sascha Wilde wrote:
> the subject says it all. ;-)
>
> The current default is nil, which means that server certificates are not
> checked which is a bad thing. Not checking the certificate means, that
> SSL/TLS connections, which are supposed to be "save" (and most users
> will believe they are) are really not trustworthy.
>
We should also provide an easy way to insert the certificate into a
local trust store (ie 'ask will allow "always" and "never" as well as
"yes" and "no" answers) , to give the power over who to trust back to
the users, rather than allowing companies like Verisign to monopolise
it. Does gnutls have a local per user store we can use for this?
next prev parent reply other threads:[~2008-04-08 9:19 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-04-08 9:05 Default value of tls-checktrust should be 'ask Sascha Wilde
2008-04-08 9:19 ` Jason Rumney [this message]
2008-04-08 10:55 ` Sascha Wilde
2008-04-08 11:08 ` Jason Rumney
2008-04-08 13:04 ` Sascha Wilde
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47FB38B7.70806@gnu.org \
--to=jasonr@gnu.org \
--cc=emacs-devel@gnu.org \
--cc=wilde@sha-bang.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.